FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   British Airways | Executive Club (https://www.flyertalk.com/forum/british-airways-executive-club-446/)
-   -   log off ba.com and make sure you clear cookies after (https://www.flyertalk.com/forum/british-airways-executive-club/1954578-log-off-ba-com-make-sure-you-clear-cookies-after.html)

mrandery Feb 4, 2019 8:45 am

log off ba.com and make sure you clear cookies after
 
This is from the website bugs/issues thread but it needs wider airing so people can be careful until it is fixed. Clear all cookies after logging out. Logging out alone does not work.

I've emailed BA about this.


Originally Posted by mrandery (Post 30734618)
I'm having the same issue. I logged in on an colleague's computer and saw his bookings. He had logged out earlier in the day.

Terrible, careless and absolutely ridiculous from a privacy point of view.


Originally Posted by just_starting (Post 30643123)
https://cimg6.ibsrv.net/gimg/www.fly...60a2ad4f99.png

This keeps happening to me - I log out of one account and into another, and instead of my own bookings I see the other person's bookings all listed in my account, just like if they were my own. I can even go into MMB and edit them as I please.

I've had this happen even hours after logging out before. This is somewhat concerning and strongly puts me off ever logging into my account from a public computer!


Ldnn1 Feb 4, 2019 10:35 am

Wow, that is indeed pretty bad!

Gomac Feb 4, 2019 10:53 am

Yes I noticed this a few days ago after logging out of my account and into my wife’s. Not good at all

orbitmic Feb 4, 2019 11:54 am

Scandalous.

VSLover Feb 4, 2019 12:05 pm

scandalous or as expected--horrid BA infrastructure? i just saw this example with my partner on my laptop and honestly, if i had energy to report BA to the DPA i will.

Paren Feb 4, 2019 12:08 pm

Do what I do and use a private/Incognito session if using a public computer. Still sign out of course to be on the safe side but cookies not saved.

TWCLAM Feb 4, 2019 2:26 pm

Or dont do any of that, take the screenshots as the OP has then contact BA and tell them you are reporting a bug and feel 30 days is a long enough time for a company their size after which time you'll be sending the evidence to the DCO who will probably take a very dim view based on their recent track record.

Clearly the only way they are going to learn at this point is with the bad publicity and the fines mounting up. Really no excuse for it in this day and age & just reconfirms to me that BA's approach of playing the poor innocent victim in the breaches of last year wasn't exactly a deserved position.

just_starting Feb 18, 2019 3:41 pm


Originally Posted by mrandery (Post 30737933)
This is from the website bugs/issues thread but it needs wider airing so people can be careful until it is fixed. Clear all cookies after logging out. Logging out alone does not work.

I've emailed BA about this.

Thanks - I'm the one who took that screenshot a while ago, only just spotted that you've raised this again.

​​​​​​​Did you ever hear back?

mrandery Feb 19, 2019 2:38 am


Originally Posted by just_starting (Post 30794296)
Thanks - I'm the one who took that screenshot a while ago, only just spotted that you've raised this again.

​​​​​​​Did you ever hear back?

I didn't hear back for my email. I sent a link to this thread to their twitter team and they said they would pass it on. 2 weeks ago.

And guess what, it still isn't fixed. I just tried it with my account and my son's account. Logged out of mine and then logged into his and sure enough all my bookings available to see and manipulate.

They're unbelievable at BA IT

gustavmahler Feb 19, 2019 2:59 am

I've had this a lot when I switch between mine and my wife's accounts in the same browser.

cgtechuk Feb 19, 2019 3:06 am


Originally Posted by mrandery (Post 30795889)
I didn't hear back for my email. I sent a link to this thread to their twitter team and they said they would pass it on. 2 weeks ago.

And guess what, it still isn't fixed. I just tried it with my account and my son's account. Logged out of mine and then logged into his and sure enough all my bookings available to see and manipulate.

They're unbelievable at BA IT

PM me and I will give you the email address for the head of online security at BA, I spoke him the last time I found a glitch and it was resolved in hours / days.

I think I can see why it is doing that behaviour but I wont reveal it publically.

mrandery Mar 20, 2019 12:09 pm

This is still not fixed!

It's been reported to the head of online security / twitter team

jackcarr Mar 20, 2019 12:17 pm

I hope they get slapped with a fine. BA have an extremely lax attitude to data security.

peterrabbit Mar 20, 2019 12:28 pm

I reported this weeks ago. A fine might concentrate their minds

fluffymitten Mar 20, 2019 2:43 pm

Never had that issue but then I always set my browser to delete all cookies when I close it. Have been safely paranoid for many years :D


All times are GMT -6. The time now is 4:08 pm.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.